GCVE - cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Comscripts (`08e718be-ea0f-560b-8c81-ac504fb8d238`)
Product	Cs Forum (`f2135af8-9878-5313-b2b7-6b6b7c2e29e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3171`	vulnerable	2026-06-08 04:49:08.483424	Details available CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php. Published: 2006-06-23T00:00:00.000Z Updated: 2024-08-07T18:16:05.963Z Open on db.gcve.eu Reference links http://www.osvdb.org/26384 http://www.comscripts.com/scripts/php.cs-forum.643.html http://secunia.com/advisories/20534 https://exchange.xforce.ibmcloud.com/vulnerabilities/27177 http://www.vupen.com/english/advisories/2006/2314	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3170`	vulnerable	2026-06-08 04:49:08.483101	Details available CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message. Published: 2006-06-23T00:00:00.000Z Updated: 2024-08-07T18:16:06.144Z Open on db.gcve.eu Reference links http://www.comscripts.com/scripts/php.cs-forum.643.html http://secunia.com/advisories/20534 https://exchange.xforce.ibmcloud.com/vulnerabilities/27178 http://www.osvdb.org/26385 http://www.vupen.com/english/advisories/2006/2314	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3169`	vulnerable	2026-06-08 04:49:08.482734	Details available Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom, (6) CSForum_mail, and (7) CSForum_url cookie parameters in (b) ajouter.php. Published: 2006-06-23T00:00:00.000Z Updated: 2024-08-07T18:16:05.965Z Open on db.gcve.eu Reference links http://www.comscripts.com/scripts/php.cs-forum.643.html http://secunia.com/advisories/20534 http://www.osvdb.org/26380 http://www.vupen.com/english/advisories/2006/2314 http://www.securityfocus.com/archive/1/436789/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3168`	vulnerable	2026-06-08 04:49:08.482274	Details available SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php. Published: 2006-06-23T00:00:00.000Z Updated: 2024-08-07T18:16:05.948Z Open on db.gcve.eu Reference links http://www.comscripts.com/scripts/php.cs-forum.643.html http://secunia.com/advisories/20534 http://www.vupen.com/english/advisories/2006/2314 https://exchange.xforce.ibmcloud.com/vulnerabilities/27176 http://www.securityfocus.com/archive/1/436789/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.